How to explain to his girlfriend why the Bing search (Bing) inaccessible?

January 23, 2019 in the afternoon, I was crazy company of line with the code, the code immersed in my world, is enjoying one line lambda expression he had just written, and suddenly micro-channel uploads a message to his girlfriend.

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

In the browser input cn.bing.com, show the following results:

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

So, I open my terminal, ready to ping it and see how matter in the end:

➜ mhcoding ping cn.bing.com

PING cn.bing.com (127.0.0.1): 56 data bytes

64 bytes from 127.0.0.1: icmp_seq=0 ttl=64 time=0.046 ms

64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.091 ms

64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.098 ms

So, I would reply to his girlfriend on a micro letter:

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

I came home from work at night, before I take off my shoulder bag, girlfriend ran quickly came to me.

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

DNS

DNS, Domain Name System is an acronym, translated into the domain name system. It acts as a distributed database of domain names and IP addresses will be mapped each other, it can make it easier to access the Internet.

DNS most important role is to translate domain names into ip address.

IP addresses

IP address is the IP Address acronym refers to Internet Protocol Address (English: Internet Protocol Address, also translated as the Internet Protocol address). IP address is a uniform address format of the IP protocol provides, assign it a logical address for each network on the Internet and each host in order to mask the differences in the physical address.

Each computer on the Internet is assigned an IP address.

IP addresses are used to computers on the Internet a number. Daily situation we see is we need to have IP addresses can not communicate on each networked PC.

An IP address is a 32-bit binary number, it is generally divided into four "8-bit binary number" (i.e. 4 bytes). IP addresses are typically in the form of "dotted decimal" expressed as (ABCD) of. Such as: 208.80.152.2

domain name

域名,这个是很多人都熟悉的概念,我们大多数情况下,在浏览器上访问某个网站的时候,都是通过域名访问的。

域名是由一串用点分隔的字符组成的互联网上某一台计算机或计算机组的名称,用于在数据传输时标识计算机的电子方位。

域名可以说是一个IP地址的代称,目的是为了便于记忆后者。

例如,wikipedia.org是一个域名,和IP地址208.80.152.2相对应。人们可以直接访问wikipedia.org来代替IP地址,然后域名系统(DNS)就会将它转化成便于机器识别的IP地址。

这样,人们只需要记忆wikipedia.org这一串带有特殊含义的字符,而不需要记忆没有含义的数字。

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

域名、IP和DNS

在现实生活中,我们可能经常需要通过电话找人,每一台接入网络的电话都有一个自己独一无二的号码。

有的时候,我们想要打某个公司的客服电话,如想要给工商银行的客服打电话,想查询账户余额。但是我们不知道具体号码,我们可以拨打114,告诉他们自己想要拨打工商银行的电话。然后114的客服会帮你查询到工商银行的电话,并帮你自动转接到工商银行的客服电话。

这个过程就和域名、IP地址以及DNS之间的关系比较像了。

每一台接入网络的电话 -> 每一台接入网络的计算机

工商银行 -> 域名

电话号码 -> ip地址

114咨询台 -> DNS

有了DNS,我们不需要记住每一个网站的多个IP地址,我们只需要之道这个网站的域名就可以了。就像我们不关心工商银行的客服电话,我们只需要知道我们要找工商银行就可以了。

而且,对于一个网站来说,一个域名会对应其无数个IP地址。会通过负载均衡等方式进行调配。就像工商银行的客服中心也有很多分机的道理是一样的。

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

某些网络运营商为了某些目的,可能会限制某些用户访问某一些特定的网站,而限制手段最常用的就是DNS污染和DNS劫持。

正常情况下,当我们访问某个域名的时候,会跳转到失败页面,但是如果爬到墙外,就可以正常访问。比如所谓的qiang。

还有一种典型场景,当我们的宽带欠费的时候,访问某个网站时,被自动跳转到运营商网站,提示充值。

这都是运营商在DNS上做了手脚。其目的是为了让域名无法解析到正常的IP地址。

而此次必应无法访问期间,通过ping可以发现,cn.bing.com被DNS解析成127.0.0.1。这是无法访问bing的直接原因原因。

127.0.0.1是回送地址,指本地机,一般用来测试使用。

DNS污染

网域服务器缓存污染(DNS cache pollution),又称域名服务器缓存投毒(DNS cache poisoning),是指一些刻意制造或无意中制造出来的域名服务器数据包,把域名指往不正确的IP地址。

其工作方式是:由于通常的DNS查询没有任何认证机制,而且DNS查询通常基于的UDP是无连接不可靠的协议,因此DNS的查询非常容易被篡改,通过对UDP端口53上的DNS查询进行入侵检测,一经发现与关键词相匹配的请求则立即伪装成目标域名的解析服务器(NS,Name Server)给查询者返回虚假结果。

DNS污染指的是用户访问一个地址,国内的服务器(非DNS)监控到用户访问的已经被标记地址时,服务器伪装成DNS服务器向用户发回错误的地址的行为。为了减免网络上的交通,一般的域名都会把外间的域名服务器数据暂存起来,待下次有其他机器要求解析域名时,可以立即提供服务。一旦有关网域的局域域名服务器的缓存受到污染,就会把网域内的电脑导引往错误的服务器或服务器的网址。

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

简单点说,DNS污染是指把自己伪装成DNS服务器,在检查到用户访问某些网站后,使域名解析到错误的IP地址。

DNS劫持

DNS劫持又称域名劫持,是指在劫持的网络范围内拦截域名解析的请求,分析请求的域名,把审查范围以外的请求放行,否则返回假的IP地址或者什么都不做使请求失去响应,其效果就是对特定的网络不能访问或访问的是假网址。

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

简单点说,DNS劫持指的是通过非法手段,获取DNS服务器的权限,然后把DNS配置进行修改,使域名解析到错误的IP地址。

DNS污染和DNS劫持的区别

DNS劫持是劫持了DNS服务器,进而修改其解析结果。

DNS污染是国内的某些服务器对DNS查询进行入侵检测,发现与黑名单上匹配的请求,该服务器就伪装成DNS服务器,给查询者返回虚假结果。它利用了UDP协议是无连接不可靠性。

一个是劫持了DNS服务器,一个是伪装成DNS服务器。造成的结果都是返回错误的IP地址。

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

如何解决DNS污染和劫持

对于 DNS劫持,可以通过手动更换DNS服务器为第三方公共DNS解决。

公共DNS 是一种面向大众的免费的 DNS 互联网基础服务。更换 DNS 服务器地址为 公共DNS 后,可以在一定程度上加快域名解析速度、防止 DNS劫持、加强上网安全,还可以屏蔽大部分运营商的广告。

下图就是常用的公共DNS:

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

(图源:http://www.yunweipai.com/archives/5175.html)

对于 DNS污染,可以说,个人用户很难单单靠设置解决,通常可以使用 VPN 或者域名远程解析的方法解决。

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

必应挂了如何访问

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

一、用必应(Bing)临时域名

www2.bing.com 或者 www4.bing.com

二、强制绑定host

用户只需要暂时修改下host然后坐等微软服务器恢复后再删除即可。即强制指定cn.bing.com指向的IP地址。

13.107.21.200 cn.bing.com

修改后如果浏览器依然无法正常打开请直接重启系统,重启后再尝试打开必应搜索看看能否恢复正常访问。

三、修改DNS服务器

把DNS修改成公共DNS,如8.8.8.8 或者 114.114.114.114。

参考:https://laod.cn/news/cn-bing-com-404.html

Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?
Rambling: How to explain why his girlfriend will be search (Bing) inaccessible?

事件后续

1月23日下午,有网友发现微软搜索引擎网站必应(Bing)出现无法访问故障。打开之后显示,“无法访问此网站”。

1月24日,微软发言人先后回复记者称,“正在展开调查”以及“我们正在积极应对,以确定下一步相关措施”。

January 25 morning, a Microsoft spokesman said the reporter replies, "We will be confirmed before the site is not accessible in China, but is now back to normal." However, Microsoft did not disclose the reasons previously not normally access.

Focus of this paper is to analyze the cause will be not be a normal visit, and the domain name, DNS and other not-depth introduction and expansion, if interested readers back will continue to unfold one by one introduction.

Guess you like

Origin www.cnblogs.com/CQqf2019/p/11205230.html